adjusted session config to new client session setup
made sure session id gets invalidated on every logout